Web · API · Mobile Security

Michael
Adeyanju.

Penetration Tester & Security Consultant

Securing web, API and mobile platforms at scale. 4+ years helping fintechs and regulated organisations identify, exploit and remediate critical security risks.

Book a Call
Remote engagements · Clients worldwide
Michael Adeyanju, engraved portrait
Trusted by companies globally
NINAuthFIRSATIBMultigate
The Person

Application security
for regulated fintech.

I'm a Senior Security Engineer specialising in application security for high-stakes fintech and regulated environments. My focus is on identifying and eliminating security risks before they become breaches.

With expertise spanning web application security, mobile reverse engineering and API security, I work closely with engineering and DevOps teams to embed security into the development lifecycle. Not as an afterthought, but as a core component of product delivery.

My approach combines deep technical expertise with clear communication, so stakeholders from CTOs to developers can understand and act on security findings. The job is the fix, not the finding.

  1. 014+ years in security engineering
  2. 02Penetration testing & vulnerability assessment
  3. 03Cross-functional team collaboration
  4. 04Regulated fintech environments
Services

Web, API and mobile.
Tested by hand.

Specialised security services designed to protect your applications, support compliance, and reduce real risk.

01

Web Application Security

Comprehensive security assessments of web applications to identify vulnerabilities before attackers do. OWASP Top 10 focused testing for production-ready applications.

02

API Security Assessment

In-depth analysis of REST, GraphQL and SOAP APIs. Authentication flaws, injection points and business logic vulnerabilities.

03

Mobile Application Security

Android and iOS testing, static and dynamic. Insecure data storage, weak cryptography and communication vulnerabilities.

04

Penetration Testing

Real-world attack simulation to uncover exploitable vulnerabilities. Detailed reporting with risk prioritisation and remediation guidance.

05

Threat Modelling (STRIDE)

Proactive threat identification using STRIDE. Map attack surfaces and prioritise security investment before development.

06

DevSecOps & Secure SDLC

Security integrated into CI/CD pipelines. Faster, safer releases with automated security testing and developer training.

07

Reverse Engineering

Android application reverse engineering to uncover hidden vulnerabilities, analyse malware and validate security controls.

The Work

Where the work happened.
And what it changed.

A track record of securing critical fintech infrastructure and delivering measurable security improvements.

2024 to present

Senior Security Engineer

Multigate Payment Limited
  • Securing high-volume fintech infrastructure processing millions in transactions
  • Led 30+ comprehensive security assessments across web, mobile and API platforms
  • Reduced exploitable threat vectors by 60% through systematic vulnerability remediation
  • Improved overall application security posture by 75%
30+
Assessments
60%
Threat reduction
75%
Security improvement
2022 to 2025

Security Engineer

Venture Garden Group
  • Secured multiple fintech and enterprise platforms serving regulated industries
  • Conducted web, mobile and API security reviews for critical applications
  • Improved remediation cycles and enabled secure, on-time releases
  • Collaborated with engineering teams to implement security best practices
15+
Platforms secured
50%
Faster remediation
Case Studies

Case studies.
Findings, then fixes.

Real-world security assessments with measurable impact on application security and risk reduction. Client names withheld.

The challenge

A fintech platform connecting to multiple banking APIs via SWIFT required comprehensive security validation before production deployment.

Tools & techniques
Burp Suite ProNmapCustom ScriptsAPI Fuzzing
Impact & results

Identified 12 critical vulnerabilities including authentication bypasses and injection points. All issues remediated before launch, ensuring compliance with banking security standards.

The challenge

A national-scale identity verification system processing millions of requests needed thorough security assessment to protect citizen data.

Tools & techniques
Burp SuitePostmanOWASP ZAPCustom Testing Frameworks
Impact & results

Discovered and helped remediate critical access control vulnerabilities. Enhanced data protection measures for sensitive identity information.

The challenge

A growing fintech needed to understand their threat landscape before expanding into new markets with stricter regulatory requirements.

Tools & techniques
STRIDE MethodologyAttack TreesRisk Assessment Frameworks
Impact & results

Delivered comprehensive threat model identifying 45+ potential attack vectors. Prioritised security roadmap adopted by engineering leadership.

The challenge

Mobile applications for financial services required deep security analysis including reverse engineering to identify hidden vulnerabilities.

Tools & techniques
MobSFApktoolFridaJADXObjection
Impact & results

Uncovered hardcoded credentials, insecure storage patterns and weak cryptographic implementations. Guided development teams through secure remediation.

Built by me

SecTools.ng

Free cybersecurity tools for beginners and practitioners. No sign-ups, no fluff, just tools that solve real problems.

Cyber Path FinderResume ReviewerInterview Question CoachPentest Report GeneratorFix-First Engine
Visit sectools.ng
The Toolkit

Tools and techniques.
Chosen for the job.

The toolkit for identifying, exploiting and remediating security vulnerabilities across platforms.

Security Testing

  • Burp Suite Pro
  • Nmap
  • Nessus
  • Metasploit
  • OWASP ZAP
  • Nikto

Mobile Security

  • MobSF
  • Apktool
  • Frida
  • JADX
  • Objection
  • dex2jar

Frameworks & Standards

  • OWASP Top 10
  • MASVS
  • MSTG
  • STRIDE
  • NIST
  • ISO 27001

Tools & Platforms

  • Kali Linux
  • Postman
  • Git
  • Docker
  • AWS Security
  • Azure Security
Credentials

Credentials.
Earned, and in progress.

Industry-recognised certifications validating expertise in security assessment and ethical hacking.

6
Certified
2
In progress
  • CompTIA PenTest+
    Penetration Testing
    Certified
  • AZ-500
    Azure Security Engineer
    Certified
  • SC-200
    Microsoft Security Operations Analyst
    Certified
  • ISO/IEC 27001 Lead Implementer
    Information Security Management Systems
    Certified
  • SC-900
    Microsoft Security Fundamentals
    Certified
  • AZ-900
    Microsoft Azure Fundamentals
    Certified
  • CEH
    Certified Ethical Hacker
    In progress
  • OSCP
    Offensive Security Certified Professional
    In progress
Speaking

On stage.
Talks and sessions.

Public talks and community sessions, from GDG Lagos to student builder groups.

3
Talks and sessions
  • Building a Cybersecurity Career Without Traditional Tech Background
    Ubuntu Bridge Initiative webinar, The Root Access Network (T.R.A.N.)
    Internship Weekly Webinar, Cohort 1 · 6 Jun 2026
    Watch
  • AWS for Cybersecurity
    AWS Student Builder Group, FUTA (Federal University of Technology, Akure)
    May 2026
  • Building Resilient APIs: Strategies for Handling API Attacks
    Google DevFest Lagos 2024 (GDG Lagos)
    Day 1, 15 Nov 2024 · Landmark Event Centre, Lagos
    WatchEvent page
Mentorship

Cybersecurity advisory.
One to one.

Personal guidance from a working security engineer. Whether you're starting out or moving up, I'll help you find your way through it.

Track 01

Penetration Testing

Offensive security techniques, vulnerability assessment and ethical hacking methodology.

  • Web App Testing
  • Network Pentesting
  • Report Writing
  • Tool Mastery
Track 02

DevSecOps

Security automation, CI/CD pipeline security and infrastructure as code.

  • SAST/DAST Integration
  • Container Security
  • Cloud Security
  • Security Pipelines
Track 03

Security Leadership

Leading security teams, communicating with stakeholders and building security culture.

  • Team Building
  • Risk Communication
  • Strategy Development
  • Vendor Management
  • 1-on-1 personalised mentorship sessions
  • Real-world project guidance
  • Career path navigation
  • Industry networking opportunities
  • Resume & interview preparation
  • Certification guidance (OSCP, CEH and more)

Reach out through the form below.

Book a Call

Fifteen minutes.
No back and forth.

Want to discuss a pentest, a security audit or one-to-one mentorship? Grab a slot on the calendar below.

15-minute intro callRemote, any timezonePick a slot below

Prefer another way? Open the booking page in a new tab

Contact

Let's connect.
Before attackers find it.

Whether you need a security assessment, a penetration test, or want to talk through securing your application.

opeyemi9126@gmail.comLinkedIn profile
MICHAEL ADEYANJU
michaeladeyanju.com

Available for new projects.

Questions

What companies ask.
Before they hire a pentester.

Still have questions? Ask them in a 15-minute call.

Book a Call